When will someone go all in and release a hack game with hundreds of emulated real little servers of various operating systems and vulnerabilities?
Unfortunately I can no longer find the site, and my Google fu has failed me.
Unlike Hack the Box, no signup was necessary, you could just download the VM and get started.
Does anyone here know of any good alternatives they'd like to recommend?
Edit. Found it:
- What it used to be: https://web.archive.org/web/20180202211058/https://exploit-e...
- Mirror: https://exploit.education/
- Also can be downloaded at vulnhub: https://www.vulnhub.com/series/exploit-exercises,11/
It would be fun to run in an “anything goes” type setup. Get a cheap raspberry pi and install some really old Linux kernel with plenty of well know holes. I’d worry about delineating between game-machines and real ones. It would have to be totally isolated from the real network I guess.
(Maybe that's actually what Hack the Box is, mentioned in the sibling— I hadn't heard of that and only looked briefly at the homepage for it.)
Hack the Box hosts the VM for you on their servers (and you connect to a VPN to get access), but it's effectively that. They release a box every so often (roughly monthly?) and users compete to collect the user/root flags.
They also have a rotating selection of past boxes (and I think you get access to all of them if you pay them), so it's kind of like an "on demand" CTF.